Isolated-vm Flaw Lets Sandboxed JavaScript Escape to Host for Potential RCE

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-08-20 13:48 UTC
  • Importiert: 2026-08-27 11:44 UTC
  • Quelle-ID: thn_global
  • uid_hash: 35b4f92ada8b4b1c12b5edb5f5f23dfc1c4cdedbf1779fc427a1a65177902624

Inhalt

Cybersecurity researchers have disclosed a critical security flaw in isolated-vm, a popular open-source sandbox with more than 2,900 stars and 190 forks on GitHub, that could allow attackers to escape the confines of the isolated environment.

The vulnerability ("GHSA-864f-rcv7-6rh4"), which has yet to be assigned a CVE identifier, impacts all versions of the library before and including 7.0.0.

No data

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
The Hacker News

thn_global

security_news - de https://feeds.feedburner.com/TheHackersNews